CVE - CVE-2012-1033

CVE-ID
CVE-2012-1033	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:https://www.isc.org/software/bind/advisories/cve-2012-1033 HP:HPSBUX02835 URL:http://marc.info/?l=bugtraq&m=135638082529878&w=2 HP:SSRT100763 URL:http://marc.info/?l=bugtraq&m=135638082529878&w=2 SUSE:openSUSE-SU-2012:0863 URL:https://hermes.opensuse.org/messages/15136456 SUSE:openSUSE-SU-2012:0864 URL:https://hermes.opensuse.org/messages/15136477 CERT-VN:VU#542123 URL:http://www.kb.cert.org/vuls/id/542123 BID:51898 URL:http://www.securityfocus.com/bid/51898 OSVDB:78916 URL:http://osvdb.org/78916 SECTRACK:1026647 URL:http://www.securitytracker.com/id?1026647 SECUNIA:47884 URL:http://secunia.com/advisories/47884 XF:isc-bind-update-sec-bypass(73053) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/73053
Assigning CNA
N/A
Date Entry Created
20120207	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120207)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Common Vulnerabilities and Exposures

CVE-2012-1033